Skip to content
OpenAdvisories

Package · Wolfi

argocd-image-updater-compat

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-55190 Scanner template

    Argo CD: Project API Token Exposes Repository Credentials

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive rep…

    argoproj Argo CD argocd-image-updater github.com/argoproj/argo-cd Wolfi Go
  • Critical 9.1
    CVE-2025-47933

    Argo CD allows cross-site scripting on repositories page

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in the reposi…

    argoproj Argo CD argocd-image-updater github.com/argoproj/argo-cd Wolfi Go
  • Critical 9.2
    CVE-2025-21613

    go-git has an Argument Injection via the URL field

    go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to…

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go